+# $OpenLDAP$
+# Definitions from RFC2307 (Experimental)
+# An Approach for Using LDAP as a Network Information Service
-# Definitions from RFC2307
+# Depends upon core.schema and cosine.schema
# Note: The definitions in RFC2307 are given in syntaxes closely related
# to those in RFC2252, however, some liberties are taken that are not
# i.e. nisSchema in RFC2307 is 1.3.6.1.1.1
#
# Syntaxes are under 1.3.6.1.1.1.0 (two new syntaxes are defined)
+# validaters for these syntaxes are incomplete, they only
+# implement printable string validation (which is good as the
+# common use of these syntaxes violates the specification).
# Attribute types are under 1.3.6.1.1.1.1
# Object classes are under 1.3.6.1.1.1.2
# Attribute Type Definitions
-attribute ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
+attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
DESC 'An integer uniquely identifying a user in an administrative domain'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
+attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
DESC 'An integer uniquely identifying a group in an administrative domain'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-# TBC: caseIgnoreIA5SubstringsMatch is not defined
-
-attribute ( 1.3.6.1.1.1.1.2 NAME 'gecos'
+attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos'
DESC 'The GECOS field; the common name'
EQUALITY caseIgnoreIA5Match
+ SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
+attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
DESC 'The absolute path to the home directory'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
+attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
DESC 'The path to the login shell'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
+attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
+attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
+attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
+attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
+attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
+attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
+attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-# TBC: caseIgnoreIA5SubstringsMatch is not defined
-
-attribute ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
+attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
EQUALITY caseExactIA5Match
+ SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-# TBC: caseIgnoreIA5SubstringsMatch is not defined
-
-attribute ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
+attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
EQUALITY caseExactIA5Match
+ SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-attribute ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
+attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
SYNTAX 1.3.6.1.1.1.0.0 )
-attribute ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
+attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
+attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
SUP name )
-attribute ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
+attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
+attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
- DESC 'IP address as a dotted decimal, eg. 192.168.1.1, omitting leading zeros'
+attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
+ DESC 'IP address'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
-attribute ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
- DESC 'IP network as a dotted decimal, eg. 192.168, omitting leading zeros'
+attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
+ DESC 'IP network'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
- DESC 'IP netmask as a dotted decimal, eg. 255.255.255.0, omitting leading zeros'
+attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
+ DESC 'IP netmask'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )
-attribute ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
- DESC 'MAC address in maximal, colon separated hex notation, eg. 00:00:92:90:ee:e2'
+attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
+ DESC 'MAC address'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
-attribute ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
+attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
DESC 'rpc.bootparamd parameter'
SYNTAX 1.3.6.1.1.1.0.1 )
-attribute ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
+attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
DESC 'Boot image name'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-attribute ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
+attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
SUP name )
-# TBC: caseIgnoreIA5SubstringsMatch is not defined
-
-attribute ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry'
+attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry'
EQUALITY caseExactIA5Match
+ SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE )
# Object Class Definitions
MUST ( cn $ gidNumber )
MAY ( userPassword $ memberUid $ description ) )
-# TBC: quotes in quoted strings
-
objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL
- DESC 'Abstraction an Internet Protocol service.
- Maps an IP port and protocol (such as tcp or udp)
- to one or more names; the distinguished value of
- the cn attribute denotes the service"s canonical
- name'
+ DESC 'Abstraction an Internet Protocol service'
MUST ( cn $ ipServicePort $ ipServiceProtocol )
MAY ( description ) )
-# TBC: quotes in quoted strings
-
objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL
- DESC 'Abstraction of an IP protocol. Maps a protocol number
- to one or more names. The distinguished value of the cn
- attribute denotes the protocol"s canonical name'
+ DESC 'Abstraction of an IP protocol'
MUST ( cn $ ipProtocolNumber $ description )
MAY description )
-# TBC: quotes in quoted strings
-
objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL
- DESC 'Abstraction of an Open Network Computing (ONC)
- [RFC1057] Remote Procedure Call (RPC) binding.
- This class maps an ONC RPC number to a name.
- The distinguished value of the cn attribute denotes
- the RPC service"s canonical name'
+ DESC 'Abstraction of an ONC/RPC binding'
MUST ( cn $ oncRpcNumber $ description )
MAY description )
-# TBC: quotes in quoted strings
-
objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY
- DESC 'Abstraction of a host, an IP device. The distinguished
- value of the cn attribute denotes the host"s canonical
- name. Device SHOULD be used as a structural class'
+ DESC 'Abstraction of a host, an IP device'
MUST ( cn $ ipHostNumber )
MAY ( l $ description $ manager ) )
-# TBC: quotes in quoted strings
-
objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL
- DESC 'Abstraction of a network. The distinguished value of
- the cn attribute denotes the network"s canonical name'
+ DESC 'Abstraction of an IP network'
MUST ( cn $ ipNetworkNumber )
MAY ( ipNetmaskNumber $ l $ description $ manager ) )
objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL
- DESC 'Abstraction of a netgroup. May refer to other netgroups'
+ DESC 'Abstraction of a netgroup'
MUST cn
MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )
MAY description )
objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY
- DESC 'A device with a MAC address; device SHOULD be
- used as a structural class'
+ DESC 'A device with a MAC address'
MAY macAddress )
objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY
- DESC 'A device with boot parameters; device SHOULD be
- used as a structural class'
+ DESC 'A device with boot parameters'
MAY ( bootFile $ bootParameter ) )
projects / openldap / blobdiff